Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
File:                     W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft (raw, json)
Hash identifier:          fllfggJq7LiZheqf/8OQ8nn0pQWsiXzEWDPC+ronlZg=
Subject key identifier:   1D:44:FB:4F:26:89:E7:2F:2F:27:17:A2:66:B9:6B:04:26:83:9C:35
Authority key identifier: 5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64
Certificate issuer:       /CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
Certificate serial:       019F95B72B7D07F5426B491601420417D83F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
Manifest number:          19D0
Signing time:             Fri 24 Jul 2026 20:00:37 +0000
Manifest this update:     Fri 24 Jul 2026 20:00:37 +0000
Manifest next update:     Sat 25 Jul 2026 20:00:37 +0000
Files and hashes:         1: IzGe4nosNG0zHmK5OPSn9wIvv8k.roa (hash: wsQqoFWRb3dC2K9IWt3QbIKDbjr74CKWRJK6ESBk9b4=)
                          2: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl (hash: HVP+f0T1HQscWMzE8xSC43hNpHOMidcA2/B2Nsmn+Fw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:b7:2b:7d:07:f5:42:6b:49:16:01:42:04:17:d8:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
        Validity
            Not Before: Jul 24 20:00:37 2026 GMT
            Not After : Jul 25 20:00:37 2026 GMT
        Subject: CN=1d44fb4f2689e72f2f2717a266b96b0426839c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:85:5d:82:b6:42:af:59:48:7f:26:62:a5:4c:
                    bf:31:f5:0c:df:34:bb:03:bd:74:13:8b:60:25:8c:
                    df:cb:29:23:42:0c:1f:da:e1:d2:30:70:94:84:fe:
                    12:91:ac:10:9c:2f:85:1c:5e:73:2e:62:0f:0d:2b:
                    4b:4e:ac:e4:29:f0:eb:c1:dd:78:c3:5a:e0:58:68:
                    47:c9:fd:0d:24:63:81:46:5a:88:6d:02:d5:ed:0f:
                    3b:5c:2b:39:ac:30:29:51:a0:6c:85:0a:5b:90:3c:
                    9c:2e:fe:9b:b0:a9:db:4e:c5:d9:48:8a:e9:f8:dc:
                    a1:14:d3:77:61:35:39:bf:2f:54:79:be:e2:9e:c1:
                    c4:a9:59:ad:b2:5f:22:0b:a2:f2:8a:0c:54:00:f2:
                    cb:f4:dc:d8:d5:27:ff:be:bf:96:cd:28:d3:2e:ef:
                    17:9c:39:6d:a1:7d:ce:42:34:8c:92:4b:e6:be:4e:
                    74:69:a5:7b:2f:0b:df:cc:2c:cc:cb:d7:70:24:29:
                    d5:c7:c6:54:9d:50:fb:02:f7:3d:86:c6:2f:6d:0b:
                    98:d6:78:a9:bc:bd:35:5b:4c:57:45:f1:92:a1:df:
                    1f:5e:74:ed:16:90:d7:50:cb:a9:34:d3:04:28:7e:
                    dc:30:95:95:ab:ab:4e:3e:93:4b:4b:f4:49:a3:58:
                    6e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:44:FB:4F:26:89:E7:2F:2F:27:17:A2:66:B9:6B:04:26:83:9C:35
            X509v3 Authority Key Identifier:
                keyid:5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:cf:6f:9a:f6:88:d0:28:79:13:08:cf:5c:fb:30:39:88:d9:
         3b:ce:ed:db:64:b3:bb:15:78:7f:b7:5f:ae:59:fb:a1:9a:2e:
         bb:a5:11:a4:7d:89:ae:a8:52:5f:45:8c:7c:97:b8:20:ed:29:
         ba:3d:29:79:a9:cf:84:f8:ae:e6:75:5a:db:9e:77:16:c3:a5:
         10:57:14:69:2b:c2:3c:d1:32:3d:c0:cd:36:52:0b:05:0b:b3:
         a1:3f:69:a6:63:14:4e:84:0b:a5:62:6e:eb:96:78:8a:c6:9e:
         08:b4:de:45:d0:f7:a1:bf:b8:98:72:dc:6c:ec:c5:bf:52:e8:
         12:7a:00:51:72:1e:e4:42:58:44:3d:f2:50:0a:c0:dc:47:ae:
         08:a5:c6:7b:1a:01:15:ea:fb:f6:86:2c:09:b8:02:3b:4f:d9:
         07:93:6e:96:78:fa:0c:5e:8b:51:fe:31:ef:d9:fa:ba:38:f1:
         ef:d8:52:b9:e7:ff:34:f5:4c:7b:e4:21:19:92:98:57:4e:bb:
         0c:d6:48:f4:75:28:13:dd:e3:42:27:e6:21:f1:cf:e6:5f:50:
         f4:69:e8:da:c7:c7:9b:9d:91:78:aa:a1:70:23:29:d5:40:b7:
         c1:b9:63:6a:47:bc:c3:3d:4c:76:a5:67:95:10:2b:70:5a:fa:
         f4:8f:3c:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Vtyt9B/VCa0kWAUIEF9g/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViOWE0MGZjM2YzNTBhYmRhNTlkYmZjMDFjYTM3YTQ2ZDhk
NzQ3NjQwHhcNMjYwNzI0MjAwMDM3WhcNMjYwNzI1MjAwMDM3WjAzMTEwLwYDVQQD
EygxZDQ0ZmI0ZjI2ODllNzJmMmYyNzE3YTI2NmI5NmIwNDI2ODM5YzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoVdgrZCr1lIfyZipUy/MfUM3zS7
A710E4tgJYzfyykjQgwf2uHSMHCUhP4SkawQnC+FHF5zLmIPDStLTqzkKfDrwd14
w1rgWGhHyf0NJGOBRlqIbQLV7Q87XCs5rDApUaBshQpbkDycLv6bsKnbTsXZSIrp
+NyhFNN3YTU5vy9Ueb7insHEqVmtsl8iC6LyigxUAPLL9NzY1Sf/vr+WzSjTLu8X
nDltoX3OQjSMkkvmvk50aaV7LwvfzCzMy9dwJCnVx8ZUnVD7Avc9hsYvbQuY1nip
vL01W0xXRfGSod8fXnTtFpDXUMupNNMEKH7cMJWVq6tOPpNLS/RJo1hu9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1E+08miecvLycXoma5awQmg5w1MB8GA1UdIwQY
MBaAFFuaQPw/NQq9pZ2/wByjekbY10dkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzVwQV9EODFDcjJsbmJfQUhLTjZSdGpYUjJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yZWVkZTYtZmMyMC00ZjhhLWFlMjkt
NzI1Mzc1MjZhZWUyLzEvVzVwQV9EODFDcjJsbmJfQUhLTjZSdGpYUjJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8yZWVkZTYtZmMyMC00ZjhhLWFlMjktNzI1Mzc1MjZhZWUy
LzEvVzVwQV9EODFDcjJsbmJfQUhLTjZSdGpYUjJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW89vmvaI
0Ch5EwjPXPswOYjZO87t22SzuxV4f7dfrln7oZouu6URpH2JrqhSX0WMfJe4IO0p
uj0peanPhPiu5nVa2553FsOlEFcUaSvCPNEyPcDNNlILBQuzoT9ppmMUToQLpWJu
65Z4isaeCLTeRdD3ob+4mHLcbOzFv1LoEnoAUXIe5EJYRD3yUArA3EeuCKXGexoB
Fer79oYsCbgCO0/ZB5Nulnj6DF6LUf4x79n6ujjx79hSuef/NPVMe+QhGZKYV067
DNZI9HUoE93jQifmIfHP5l9Q9Gno2sfHm52ReKqhcCMp1UC3wbljake8wz1MdqVn
lRArcFr69I887Q==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:50:54 2026 by rpki-client